Schneider Electric
Number 59 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
312
Critical
40
High
152
Known Exploited
0
Exploit available
0
Network, no login needed
41.1%
Of 287 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 42 | 2 | 24 | 15 | 1 | 0 |
| 2025 | 59 | 2 | 26 | 31 | 0 | 0 |
| 2024 | 48 | 6 | 28 | 13 | 1 | 0 |
| 2023 | 94 | 20 | 46 | 27 | 1 | 0 |
| 2022 | 42 | 4 | 22 | 13 | 0 | 3 |
| 2021 | 1 | 0 | 1 | 0 | 0 | 0 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2019 | 3 | 0 | 1 | 0 | 0 | 2 |
| 2018 | 2 | 0 | 0 | 0 | 0 | 2 |
| 2017 | 2 | 1 | 0 | 1 | 0 | 0 |
| 2016 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2015 | 4 | 3 | 1 | 0 | 0 | 0 |
| 2014 | 15 | 2 | 3 | 8 | 2 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| StruxureWare Data Center Expert | 15 | 10 |
| PowerChute™ Serial Shutdown | 11 | 2 |
| EcoStruxure Control Expert | 10 | 7 |
| IGSS Data Server (IGSSdataServer.exe) | 10 | 10 |
| Modicon M340 CPU (part numbers BMXP34*) | 10 | 7 |
| IGSS Data Server(IGSSdataServer.exe) | 8 | 5 |
| EcoStruxure™ IT Data Center Expert | 7 | 5 |
| Modicon Controllers M241/M251 | 7 | 0 |
| OPC UA Modicon Communication Module | 7 | 3 |
| Data Center Expert | 6 | 5 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 39 | 23 |
| Authentication Issues | 20 | 14 |
| Path Traversal | 20 | 12 |
| Improper Input Validation | 18 | 7 |
| Cross-Site Scripting | 17 | 3 |
| Command Injection | 13 | 9 |
| Insecure Deserialization | 12 | 12 |
| Information Disclosure | 10 | 7 |
| Privilege Escalation | 9 | 6 |
| Code Injection | 8 | 6 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-102250 | Schneider Electric Sage RTU 1410 vulnerability | High | 0.2% | |
| CVE-2026-81861 | Schneider Electric SCADAPack 47x: Credential Exposure | Medium | 0.5% | |
| CVE-2026-3869 | Schneider Electric Modicon M580 vulnerability | Critical | 0.5% | |
| CVE-2026-8044 | Schneider Electric EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) vulnerability | High | 0.7% | |
| CVE-2026-77120 | Schneider Electric PowerLogic T300: Command Injection | High | 0.7% | |
| CVE-2026-19233 | Schneider Electric EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert): Server-Side Request Forgery | High | 0.6% | |
| CVE-2026-13348 | Schneider Electric PowerChute™ Serial Shutdown vulnerability | Medium | 0.5% | |
| CVE-2026-13337 | Schneider Electric NetBotz 5 - 750/755 vulnerability | Medium | 0.3% | |
| CVE-2026-13336 | Schneider Electric NetBotz 5 - 750/755: Command Injection | High | 1.6% | |
| CVE-2024-10085 | Schneider Electric EcoStruxure™ OPC UA Server Expert vulnerability | High | 0.4% |